IT Systems Engineer — Microsoft 365 & Innovations Lab

cy Daptiv Solutions is hiring an IT Systems Engineer to support our Microsoft 365 environment and our Innovations Lab.

This is a hands‑on, collaborative engineering role — not a help desk position. A managed service provider handles day‑to‑day support and routine Microsoft 365 administration, and a remote lab administrator leads our cloud and lab infrastructure. You are the onsite engineer who partners with both: engineering advanced tenant configuration, providing hands‑on lab support, and using AI tools to automate and document the work.

Expect roughly 60% lab and infrastructure support and 40% Microsoft 365 engineering, automation, and compliance.

Innovations Lab — in partnership with our remote lab administrator (~60%)

• Serve as the onsite hands for the lab: racking, cabling, imaging, hardware installation, network segmentation, and out-of-band management.
• Build and maintain on-premises virtualization (vSphere, Hyper‑V, or Proxmox), physical servers, switching, and firewalls.
• Stand up and tear down cyber range, demonstration, and proof‑of‑concept environments for capability development, customer demos, and proposal efforts.
• Support cloud infrastructure (AWS and Azure) alongside the lab administrator — networking, identity, and cost governance.
• Contribute to repeatable, version‑controlled environments using infrastructure as code (Terraform, Bicep, or Ansible).
• Keep the lab isolated from production and free of CUI; maintain asset inventory, lifecycle, and secure disposal.

Microsoft 365 — alongside our managed service provider (~40%)

• Serve as internal technical authority for our Microsoft 365 tenant (E5 with Enterprise Mobility + Security), working alongside — not replacing — our MSP.
• Engineer configurations outside the MSP's scope:
  Entra l Access, phishing‑resistant MFA, PIM, app registrations, and SSO integrations.
• Design and maintain Intune configuration and compliance policies, Autopilot enrollment, app deployment, and update rings.
• Tune Microsoft Defender and Purview (sensitivity labels, DLP, retention); govern SharePoint, Teams, and external sharing for a CUI environment.
• Coordinate escalations with the MSP and Microsoft support on tenant‑level issues.

• Use AI tools daily — Claude (including Claude Cowork and Claude Code), Google Gemini, and NotebookLM — to accelerate scripting, troubleshooting, runbook generation, and documentation synthesis.
• Build reusable AI‑assisted workflows for the team: prompt libraries, knowledge bases, and repeatable analysis patterns.
• Apply responsible AI practices — data handling rules for CUI and proposal‑sensitive information, appropriate tool selection, and human review of generated output.
• Automate administration and evidence collection with Power Shell and Microsoft Graph; maintain SOPs, diagrams, and runbooks.
• Implement and evidence NIST SP 800‑171 controls supporting CMMC Level 2 readiness; support the ISMS and ISO 27001 audits.

• U.S. citizenship — required for handling Controlled Unclassified Information under DFARS 252.204‑7012.
• 4+ years in enterprise IT infrastructure or systems engineering.
• Hands‑on on‑premises virtualization (vSphere, Hyper‑V, or Proxmox) and comfort with physical hardware, racking, and out-of-band management.
• Networking fundamentals: VLANs, routing, DNS, DHCP, VPN, and firewall rule sets.
• Microsoft 365 administration:
  Entra , Exchange Online, SharePoint Online, Teams, and Intune.
• Public cloud experience (AWS or Azure): accounts and subscriptions, networking, and cost management.
• Power Shell scripting for administration and automation.
• Practical, daily use of AI tools for scripting, troubleshooting or documentation — and the judgment to know when not to trust the output.
• Experience…